comment.asp

一个ＡＳＰ网站博克程序

<% Option Explicit %>
<!-- #Include File = "common/LarrixDBMS.asp" -->

<%
	If Trim(Request.Form("id")) = "" Or IsNumeric(Trim(Request.Form("id"))) = False Then
		Response.Redirect("Default.asp")
	End If
%>

<%
	Dim objDBMS
	Set objDBMS = New LarrixDBMS
	objDBMS.Open "SELECT * FROM [Comments]", 3
	objDBMS.objRSET.AddNew
	objDBMS.objRSET("ItemID").Value = Trim(Request.Form("id"))
	objDBMS.objRSET("CommentLAB").Value = Trim(Request.Form("label"))
	objDBMS.objRSET("CommentVAL").Value = Trim(Request.Form("value"))
	If Trim(Request.Form("email")) = "" Then
		objDBMS.objRSET("CommentEML").Value = "[e-mail]"
	Else
		objDBMS.objRSET("CommentEML").Value = Trim(Request.Form("email"))
	End If
	objDBMS.objRSET("CommentDTM").Value = Now()
	objDBMS.objRSET("CommentURL").Value = Request.ServerVariables("REMOTE_ADDR")
	objDBMS.objRSET("CommentHID").Value = CBool(Trim(Request.Form("hide")) = "1")
	objDBMS.objRSET.Update
	objDBMS.Close
	Set objDBMS = Nothing
	Response.Redirect("Item.asp?id=" & Trim(Request.Form("id")))
%>